Information disclosure in Cisco Webex_social

CVE-2013-1107

The search function in Cisco Webex Social (formerly Cisco Quad) allows remote authenticated users to read files via unspecified parameters, aka Bug ID CSCud40235.

Vulnerability class: Information Disclosure

EPSS: 0.009 (57.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Webex_social
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)